$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft File: 19960F4C3FEEC60D5A59281148061FB21094449A.mft (raw, json) Hash identifier: MtNBmTuzu9SRT4P2s7jiO6HnxfE8cojaUDuf1X/HVf8= Subject key identifier: ED:3E:34:7D:20:05:4C:6D:21:B7:B9:D4:07:91:EA:0C:46:E9:67:13 Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Certificate issuer: /CN=19960F4C3FEEC60D5A59281148061FB21094449A Certificate serial: 54A5409C11166D56708FF9B2EB83C44EB6B1A646 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft Manifest number: 023E Signing time: Fri 17 Apr 2026 05:25:14 +0000 Manifest this update: Fri 17 Apr 2026 05:20:14 +0000 Manifest next update: Mon 20 Apr 2026 16:14:14 +0000 Files and hashes: 1: 19960F4C3FEEC60D5A59281148061FB21094449A.crl (hash: S3SKupnf8lZp0Q54csloxuTeohI7dhiCcs0SOf0bcKQ=) 2: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: HSJwEbuYdmswA8IoW9wUF9tpsYQbZVSX70vEOoOrwhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a5:40:9c:11:16:6d:56:70:8f:f9:b2:eb:83:c4:4e:b6:b1:a6:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A Validity Not Before: Apr 17 05:20:14 2026 GMT Not After : Apr 20 16:14:14 2026 GMT Subject: CN=ED3E347D20054C6D21B7B9D40791EA0C46E96713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7b:f8:0b:06:c1:25:e4:50:b5:e5:f0:86:75: 94:c4:67:0f:06:e9:66:c8:4b:f4:07:63:0f:5e:5f: d9:29:2e:98:ad:d2:84:f5:39:a6:8e:6d:c4:1c:17: 16:6d:d1:67:17:43:76:ac:63:22:5a:bd:6e:e3:cd: 25:3d:d5:23:1e:25:3a:88:39:0d:8b:96:8a:44:ea: 41:0f:7d:94:5d:7d:19:4a:ce:d1:49:2e:0a:ac:9c: 1c:fa:6f:a4:71:c5:6d:42:33:fd:28:b9:35:cd:a2: 69:09:f7:28:97:66:2f:ef:ee:7e:1e:93:50:b5:65: 45:b6:d7:50:11:ef:db:0b:99:76:de:dd:2b:91:4b: 2d:46:17:7f:f0:ec:a4:dd:88:e9:3d:19:ee:71:2d: 87:ad:f5:5a:5c:2a:ae:95:80:80:39:5a:83:3f:bb: c5:eb:28:cb:49:d8:37:82:a3:f3:99:35:8c:32:37: 66:6a:9c:03:4b:b3:4c:2c:68:04:b4:26:ca:07:a5: ab:d0:23:0a:ca:3a:24:04:f1:6f:e9:68:44:69:f5: 82:83:78:b9:90:8b:9d:e7:f9:ef:36:f4:a6:2b:e1: 4d:83:a2:9d:f8:4d:3d:cc:31:17:9c:1b:7e:31:b3: 0c:3f:a9:52:fe:6c:c2:5c:70:3e:9f:6f:88:d8:8a: ca:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3E:34:7D:20:05:4C:6D:21:B7:B9:D4:07:91:EA:0C:46:E9:67:13 X509v3 Authority Key Identifier: keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:60:2e:95:61:69:00:66:af:4d:cb:e6:7c:83:03:91:20:cc: b9:56:da:2e:12:f1:56:33:6f:0c:0c:66:90:a2:71:05:3a:15: ef:6c:14:68:9f:bb:22:3e:dd:98:8a:3b:2d:04:e0:de:ea:39: eb:e4:83:8d:5c:08:be:6b:27:cb:80:a0:42:bd:d1:04:fb:00: a3:d2:d7:f9:74:da:b4:55:91:ef:56:fd:9f:b4:6b:ef:18:c2: 2f:19:e5:36:4d:ba:38:56:1c:4c:8a:a9:c3:8f:a0:8a:70:04: 99:88:c6:2c:ae:53:a6:dc:e3:cf:4f:57:f4:10:dc:87:f0:dc: 07:a0:f4:24:ad:f3:63:c7:6b:e1:df:bf:15:89:0d:27:63:20: 2d:15:28:af:96:14:b7:3a:fd:35:4b:16:bf:9e:42:52:39:b0: 4e:bb:a2:37:b3:07:42:fa:7e:c5:fa:c1:45:78:27:95:58:c2: 21:9f:e2:40:c4:85:35:11:1a:e6:82:be:0b:d4:a8:ca:89:c4: 21:96:58:59:f6:9e:f5:57:07:cd:fb:16:06:29:35:e0:d4:51: 6d:5e:3c:c7:cc:ca:dd:30:d8:4c:f6:c1:85:e7:76:e4:ed:26: c2:93:8d:dc:82:96:44:b7:e2:63:76:77:fe:eb:80:b1:eb:5d: c5:e2:84:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKVAnBEWbVZwj/my64PETraxpkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIx MDk0NDQ5QTAeFw0yNjA0MTcwNTIwMTRaFw0yNjA0MjAxNjE0MTRaMDMxMTAvBgNV BAMTKEVEM0UzNDdEMjAwNTRDNkQyMUI3QjlENDA3OTFFQTBDNDZFOTY3MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfe/gLBsEl5FC15fCGdZTEZw8G 6WbIS/QHYw9eX9kpLpit0oT1OaaObcQcFxZt0WcXQ3asYyJavW7jzSU91SMeJTqI OQ2LlopE6kEPfZRdfRlKztFJLgqsnBz6b6RxxW1CM/0ouTXNomkJ9yiXZi/v7n4e k1C1ZUW211AR79sLmXbe3SuRSy1GF3/w7KTdiOk9Ge5xLYet9VpcKq6VgIA5WoM/ u8XrKMtJ2DeCo/OZNYwyN2ZqnANLs0wsaAS0JsoHpavQIwrKOiQE8W/paERp9YKD eLmQi53n+e829KYr4U2Dop34TT3MMRecG34xsww/qVL+bMJccD6fb4jYisqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7T40fSAFTG0ht7nUB5HqDEbpZxMwHwYDVR0j BBgwFoAUGZYPTD/uxg1aWSgRSAYfshCURJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC8xOTk2MEY0QzNG RUVDNjBENUE1OTI4MTE0ODA2MUZCMjEwOTQ0NDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIxMDk0 NDQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFG QjIxMDk0NDQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRgLpVhaQBmr03L5nyDA5EgzLlW2i4S8VYz bwwMZpCicQU6Fe9sFGifuyI+3ZiKOy0E4N7qOevkg41cCL5rJ8uAoEK90QT7AKPS 1/l02rRVke9W/Z+0a+8Ywi8Z5TZNujhWHEyKqcOPoIpwBJmIxiyuU6bc489PV/QQ 3Ifw3Aeg9CSt82PHa+HfvxWJDSdjIC0VKK+WFLc6/TVLFr+eQlI5sE67ojezB0L6 fsX6wUV4J5VYwiGf4kDEhTURGuaCvgvUqMqJxCGWWFn2nvVXB837FgYpNeDUUW1e PMfMyt0w2Ez2wYXnduTtJsKTjdyClkS34mN2d/7rgLHrXcXihGI= -----END CERTIFICATE-----Generated at Fri Apr 17 21:29:19 2026 by rpki-client